• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 437
  • Last Modified:

ISA and USB ADSL Modems

Hi everyone,
Some time ago I installed a small business server2003 with ISA 2000 for a client. I configured the USB ADSL modem to connect to the net and set up packet filtering according to Microsofts recomendations. The small business server only had one network card serving the internal network. All the clients on the network, as well as the small business server ran F-secure client security (which also has it's own client firewall). I hadn't experienced any problems with the installation except spam from thier external emails and one virus infestation which wa quickly retified. Although a router would have been preferable for the installation, my question is was the installation I've outlined above wrong?
my thoughts on the ISA server was that it handled the web access and therefore the server was protected behind the firewall.... in this case the sbs and the ISA were on the same server.
Thanks in advance
  • 2
1 Solution
Keith AlabasterEnterprise ArchitectCommented:
I was be hard-pressed to say it was 'wrong' to install a system this way but I would certainly not install such a configuration for a commercial organisation that had consulted me to give them 'best-advice'. It is arguably true though that using the USB drivers to make the USB device appear as a network interface does work (and obviously successfully).

With now well over 200 ISA installations behind me, I have never used and have no plans to use USB devices as an interface on an ISA server (either as direct or perimeter) but this is personal preference.

I would take the view that if the site were compromised in any way, would the client have grounds against me in court for not following best-practice? The honest answer in my view would be no, best practice is often in the eye of the installer based on industry documentation and experience; the USB device is sold as a network device and you have used it as such. If a secondary question were 'would you have used that configuration as well?' then the answer would also have been ' no, not in a month of Sundays'.

HalfhiddenAuthor Commented:
Thanks Keith your answer is greatly appreciated.
Keith AlabasterEnterprise ArchitectCommented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now